ESET Rogue Applications Remover

WARNING Will Robinson


this tool detects a bunch of Winantiransom stuff so use with caution. In fact it will screw up your winantiransom program so it's service won't start. lucky I installed it and ran it in quietzone.

http://support.eset.com/kb2372/

 

after rebooting all is well again

 

Question is why it detected WinAntiransomware as rogue software

For reference:

NOTE:

Experienced Windows users have the option to run this tool from the command prompt. Click the link below for instructions:

• Run the ESET Rogue Application Remover from the command prompt

1. Click Start → All Programs → Accessories. Right-click Command Prompt and choose Run as administrator from the context menu. • Windows 8 users: Press the Windows key + Q to open an app search and type cmd into the Search field. Right-click the cmd application when it appears in results and select Run as administrator from the context menu.

2. Type CD Desktop and press Enter.

3. Type ERARemover_x86.exe (or ERARemover_x64.exe if you previously downloaded 64-bit version of ERAR) to run the tool. A new window will open in which the tool will execute.

Important!
Use the /? to see a list of optional switches. Switches include:

[/r|-r] restore changes [refer to examples]
[/a|-a] restore all changes
[/c|-c] cleanup program data
[/e|-e] accept EULA
[/s|-s] silent mode
[/u|-u] submit a report to ESET Live Grid
[/h|-h] display this help


Examples:
/a -> restore all changes
/r -> print quarantine
/r n -> restore item n from quarantine

4. Follow the on-screen directions to complete the scan.

​

 

was not posting for advanced users just home users that are lurking here. not sure why it detected it as rouge ware. all I can tell you is that it did. and yes I did submit data to eset

 

This is how i would do it in dos. this is assuming the exe was saved to desktop.
windows 10 64 bit.
right click on start menu, click on command prompt as admin. from what you can see below the default windows comes up c:\windows\system32.
or create a batch file to do it.


Microsoft Windows [Version 10.0.14372]
(c) 2016 Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>cd..

C:\Windows>cd..

C:\>cd users

C:\Users>cd xxxxx substitute your username for x's

C:\Users\xxxx>cd desktop
substitute your username for x's